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Ref 

# 


Hits 


Search Query 


DBs 


Default 
Operator 


Plurals 


Time Stamp 


L2 


498 


@ad<"20040123" and ((repeat$3 ) 
with ( event or alert$3 or intru$4)) 
(pre-exist$3 or exist$3) and 
"709"/$.ccls. 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBMJTDB 


AND 


ON 


2007/09/09 16:04 


L3 


0 


@ad<"20040123" and 
f'20020087882" or "20040250124"') 
and ((repeat$3 ) with (event or 
alert$3 or intru$4)) (pre-exist$3 or 
exist$3) and "7097$.ccls. 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBMJTDB 


AND 


ON 


2007/09/09 16:05 


L4 


40296 


@ad<"20040123" and 
("20020087882" or "20040250124") 
and ((repeat$3 ) with (event or 
alert$3 or intru$4)) or (pre-exist$3 
or exist$3) and "7097$.ccls. 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBMJTDB 


AND 


ON 


2007/09/09 16:05 


L5 


3 


@ad<"20040123" and 
("20020087882" or "20040250124") 
and (((repeat$3 ) with (event or 
alert$3 or intru$4)) or (pre-exist$3 
or exist$3)) and "709"/$.ccls. 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBMJTDB 


AND 


ON 


2007/09/09 16:57 


L6 


4 


@ad<"20040123" and 
("20020087882" or "20040250124" 
or "20040133672") and (pre-exist$3 
or exist$3) and "709"/$.ccls. 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBMJTDB 


AND 


ON 


2007/09/09 16:58 


L7 


4 


@ad<"20040123" and 
("20020087882" or "20040250124" 
or "20040133672") and (pre-exist$3 
or exist$3 or threat$5 or 
malicious$2 or danger$3) and 
"709"/$.ccls. 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM TDB 


AND 


ON 


2007/09/09 17:23 



9/9/2007 9:28:14 PM 

C:\Documents and Settings\mfearer\My Documents\EAST\Workspaces\10768931.wsp 
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L8 


3 


@ad<"20040123" and 
("20020087882" or "20040250124") 
and ((command$3 or action or 
function) and (delet$3 or block$3 or 
ban$4 or remov$3) and (period or 
time) and (port or input$4 or 
channel) and type and descri$5 and 
(date or time) and (source or 
destination)) and "709"/$.ccls. 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


AND 


ON 


2007/09/09 18:14 


L9 


3 


@ad<"20040123" and 
f "20020087882" or "20040250124") 
and (type and descri$5 and (date or 
time) and (source or destination)) 
and "709"/$.ccls. 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


AND 


ON 


2007/09/09 18:19 


L10 


1 


@ad<"20040123" and 

f "20020087882" or "20040250124") 

and ((source and destination)) and 

"709"/$.ccls. 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


AND 


ON 


2007/09/09 18:41 


Lll 


1604 


@ad<"20040123" and ((source and 
destination^ and iD and Dort and 
url) and "709"/$.ccls. 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/09 18:48 


L12 


7 


@ad<"20040123" and ((source and 
destination) near4 (\o and oort and 
url)) and "709"/$.ccls. 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/09 18:52 


L13 


24 


@ad<"20040123" and ((source and 
destination) with (ip and port and 
url)) and "709"/$.ccls. and (internal 
or external) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBMJTDB 


OR 


ON 


2007/09/09 19:48 



9/9/2007 9:28:14 PM 

C:\Documents and Settings\mfearer\My Documents\EAST\Workspaces\10768931.wsp 
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L14 


1 


@ad<"20040123" and ((identif$7 
with (monitor$3 or module or 
comput$3 or node or host or device 
or system) with receiv$3)) and 
(identif$7 with (action or 
command$3 or function or 
execut$4) with (monitor$3 or 
module or comput$3 or system or 
node or host or device)) and 
(((disparate and standard$4) with 
form)) and "7097$.ccls. 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/09 19:58 


L15 


6 


@ad<"20040123" and ((identif$7 
with (monitor$3 or module or 
comput$3 or node or host or device 
or system) with receiv$3)) and 
(identif$7 with (action or 
command$3 or function or 
execut$4) with (monitor$3 or 
module or comput$3 or system or 
node or host or device)) and 
(((disparate and standard$4) with 
form)) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/09 20:21 


L16 


2 


@ad<"20040123" and 
"20030061256" and (identif$7 
monitor$3 module comput$3 node 
host device system receiv$3 
identif$7 action command$3 
function execut$4 monitor$3 
module comput$3 system node 
host device disparate standard$4 
form) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/09 20:25 


L17 


2 


@ad<"20040123" and 
"20030061256" and (identif$7 
monitor$3 module comput$3 node 
host device system receiv$3 
identif$7 action command$3 
function execut$4 monitor$3 
module comput$3 system node 
host device disparate standard$4 
event alert incident notif$7 
malicious$2 danger$3 threat$5 
form) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/09 20:38 



9/9/2007 9:28:14 PM 
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L18 


2 


@ad< "20040123" and 
"20030061256" and (identif$7 
monitor$3 module comput$3 node 
host device system receiv$3 
identif$7 action command$3 
function execut$4 monitor$3 
module comput$3 system node 
host device disparate standard$4 
event alert receipt receiv$3 
perform$3 incident notif$7 
malicious$2 danger$3 threat$5 
form) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/09 20:39 


SI 


1 


10/768931 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/06 09:27 


S2 


1 


@ad< "20040123" and (monitor$3 
near3 module) and (event near3 
data) and ((first and second) with 
(event near3 record$3)) and 
(network$3 with messag$3) and 
(event with (database or db)) and 
(command$3 or execut$4) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/04 16:25 


S3 


0 


@ad<"20040123" and 
(Demonoulo? in or Fladebo in ^ and 

V L-' >■ 1 1 1 \mf -J • III* \y 1 1 IUU\>L/\/> Ills! Ul Ivl 

(Barrier near3 Group).as. 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/04 12:35 


S4 


3 


(Demopoulos.in. or Fladebo. in.) and 
f Barrier near3 GrouD^ as 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 

- 


ON 


2007/09/04 12:39 


S5 


1 


("2005/0193429").URPN. 


USPAT 


OR 


ON 


2007/09/04 12:36 


S6 


71 


(Demopoulos.in. or Fladebo.in.) or 
fRarripr npar - ^ Ground a<; 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/04 12:40 



9/9/2007 9:28:14 PM 
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S7 


78 


@ad<"20040123" and (monitor$3 
near3 module) and (event) and 
((event near3 record$3)) and 
(network$3 with messag$3) and 
(event with (database or db)) and 
(comma nd$3 or execut$4) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/04 12:59 


S8 


33 


@ad<"20040123" and (monitor$3 
near3 module) and (event) and 
((event near3 record$3)) and 
(network$3 with messag$3) and 
(event with (database or db)) and 
(command$3 or execut$4) and 
(virus or threat$5 or attack$3 or 
malicious or spy$5) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/04 13:28 


S9 


96 


@ad<"20040123" and 
("20040181664" "20020083168" 
"7155514" "7150044" "6801940" 
"6633835" "6553336") and 
(monitor$3 module event record$3 
network$3 messag$3 database db 
command$3 execut$4 virus 
threat$5 attack$3 malicious spy$5) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/04 14:03 


S10 


46 


"6363489" "20020078202" 
"20020188864" "20040255167" 
"20050005017" 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/04 13:55 


Sll 


37 


@ad<"20040123" and 
("20040255167" "20020188864" 
"20050005017" "20020078202" 
"6363489") and (monitor$3 module 
event record$3 network$3 
messag$3 database db command$3 
execut$4 virus threat$5 attack$3 
malicious spy$5) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/04 14:07 


S12 


24877 


@ad<"20040123" and ((evaluat$3 
or analvz4>3^ with Hncomina or 
receiv$3) with (monitor$3 or device 
or module)) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/04 14:17 


S13 


1169 


@ad<"20040123" and ((evaluat$3 
or analyze o) wnn mcbbagipj wilii 
(incoming or receiv$3) with 
(monitor$3 or device or module)) 


US-PGPUB; 

1 1QDAT' 

USOCR; 
FPRS; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/09/04 14:23 



9/9/2007 9:28:14 PM 
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S14 


12 


@ad<"20040123" and ((identif$7 or 
evaluat$3 or analyz$3) with 
messag$3 with (incoming or 
receiv$3) with (monitor$3 or device 
or module) with (threat$5 or virus 
or worm or malicious$2 or hack$3 
or spy$3)) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/04 14:25 


S15 


4474 


@ad<"20040123" and (intrusion 
near3 detection) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/04 16:55 


S16 


1397 


@ad<"20040123" and (intrusion 
near3 detection) and database 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/04 16:56 


S17 


1 


("6687748" "20060173992" 
"20050044212" "20040133672" 
"20040117478" "20040093409" 
"20040030778" "20040015582" 
"20030172155" "20030105859" 
"20030101260" "20030061346" 
"20030051026" "20030005109" 
"20020143938" "20020143934" 
"20020133586" "20020107953" 
"20020095490" "20020046275" 
"7089303" "7062553" "7016951" 
"6968377" "6898632") and 
@ad< "20040123" and ((evaluat$3 
or analyz$3) with (receiv$3 or 
inbound or incoming or in-coming 
or in-bound) with (messag$3 or 
mail$3 or email$3 or e-mail$3 or 
packet or datagram) with 
(monitor$3 or module)) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/04 18:09 


S18 


157 


"709"/$.ccls. and @ad<"20040123" 
and ((evaluat$3 or analyz$3) with 
(receiv$3 or inbound or incoming or 
in-coming or in-bound) with 
(messag$3 or mail$3 or email$3 or 
e-mail$3 or packet or datagram) 
with (monitor$3 or module)) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM TDB 


OR 


ON 


2007/09/04 18:22 
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S19 


24 


"7097$.ccls. and @ad<"20040123" 
and ((identify$ or determin$3 or 
conclud$3) with (messag$3 or 
mail$3 or email$3 or e-mail$3 or 
packet or datagram) with (threat$5 
or danger$3)) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/04 19:15 


S20 


906 


"7097$-ccls. and @ad<"20040123" 
and ((( event near3 data} or 
output$4) with (monitor$3 or 
module) with (messag$3 or mail$3 
or email$3 or e-mail$3 or packet or 
datagram)) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/04 19:24 


S21 


1198 


"709"/$.ccls. and @ad<"20040123" 
and (((event near3 data) or 
output$4 or alert$3) with 
(monitor$3 or module) with 
(messag$3 or mail$3 or email$3 or 
e-mail$3 or packet or datagram)) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBMTDB 


OR 


ON 


2007/09/04 19:34 


S22 


2317 


"7097$.ccls. and @ad< ,, 20040123" 
and ((stor$3 or sav$3) with ((event 
near3 data) or alert$3 or noti$8 or 
result$3 or output$4) with 
(database or db)) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBMTDB 


OR 


ON 


2007/09/05 10:37 


S23 


447 


n 709"/224.ccls. and 
@ad<"20040123 n and (Ystor$3 or 
sav$3) with ((event near3 data) or 
alert$3 or noti$8 or result$3 or 
output$4) with (database or db)) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBMTDB 


OR 


ON 


2007/09/05 14:08 


S24 


52 


M 7097224.ccls. and 
@ad< ,, 20040123 ,, and ((evaluat$3 
or analyz$3) with (incom$3 or 
in-com$3 or inbound or in-bound or 
receiv$3) with (messag$3 or packet 
or datagram or mail$3 or email$3 
or e-mail$3) with (monitor$3 or 
module)) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM _TDB 


OR 


ON 


2007/09/05 12:33 


S25 


3 


"709 , 7224.ccls. and 

(StoH < "700401 7 "V 1 and fYidpnfif<fc7 nr 

determin$3) with (messag$3 or 
packet or datagram or email$3 or 
e-mail$3 or mail$3) with (threat$5 
or danger$3) with (monitor$3 or 
module)) 


US-PGPUB; 
ll^PAT- 

Ujrn i f 

USOCR; 
FPRS; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/09/05 13:04 



9/9/2007 9:28:14 PM 
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S26 


117 


"709"/224.ccls. and 
@ad<"20040123" and ((receiv$3 or 
inbound or in-bound or incom$3 or 
in-com$3) with (result$3 or 
output$4 or alert$3) with (monitor$ 
or module) with (messag$3 or 
mail$3 or email$3 or e-mail$3 or 
datagram or packet)) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/05 13:42 


S27 


177 


"709'7224.ccls. and 
@ad<"20040123" and ((receiv$3 or 
inbound or in-bound or incom$3 or 
in-com$3) with (event or result$3 
or output$4 or alert$3) with 
(monitor$ or module) with 
(messag$3 or mail$3 or email$3 or 
e-mail$3 or datagram or packet)) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/05 13:43 


S28 


311 


"709'7224.ccls. and 
(a)ad<"20040123" and (fanalvz$3 or 
determin$3) with (alert$3 or event) 
with (monitor$3 or module)) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/05 14:50 


S29 


102 


(S23 or S24 or S25 or S26 or S27 or 
S28) and ((action or comman$3 or 
execut$4 or script$3 or function$3) 
with module with (event or 
alert$3)) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM.TDB 


OR 


ON 


2007/09/05 15:30 


S30 


52 


(S23 or S24 or S25 or S26 or S27 or 
S28) and ((messag$3 or mail$3 or 
email$3 or e-mail$3 or packet or 
datagram) with (receiv$3 or 
incom$3 or in-com$3 or inbound or 
in-bound) with (evaluat$3 or 
analyz$3) with (monitor$3 or 
module)) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/05 15:41 


S31 


825 


(S23 or S24 or S25 or S26 or S27 or 
S28) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/05 16:30 


S32 


974 


@ad<"20040123" and ((evaluat$3 

r\r anslv/v^fc"^ \A/it*h ( mpccani^ or 

mail$3 or email$3 or e-mail$4 or 
packet or datagram) with (receiv$3 
or incom$3 or in-com$3 or inbound 
or in-bound) with (monitor$3 or 
module)) 


US-PGPUB; 

1 KPAT" 
\JOrn I 1 

USOCR; 
FPRS; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/09/05 17:03 
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S33 


10304 


@ad<"20040123" and (intru$4 
near3 detect$3^ 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/05 17:03 


S34 


605 


@ad<"20040123" and (intru$4 
near3 detect$31 and "709"/$ eels 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/05 17:07 


S35 


114 


@ad<"20040123" and (intru$4 
near3 detect$31 and "709"/$ eels 
and (monitor$3 with module) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/05 17:38 


S36 


113 


@ad< n 20040123 M and (intru$4 
near3 detects and "7097$ eels 
and (monitor$3 with module) and 
(receiv$3 or incom$3 or in-com$3 
or inbound or in-bound) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/05 17:42 


S37 


113 


@ad<"20040123" and (intru$4 
near3 detect$3) and '709"/$.cc!s. 
and fmonitor$3 with module^ and 
(receiv$3 or incom$3 or in-com$3 
or inbound or in-bound) and 
(traffic$3 or activity or messag$3 or 
email$3 or e-mail$3 or mail$3 or. 
datagram or packet) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/05 18:00 


S38 


2 


@ad<"20040123" and 
("20040250124" "20040133672") 
and (monitor$3 module receiv$3 
incom$3 in-com$3 inbound 
in-bound traffic$3 activity messag$3 
email$3 e-mail$3 mail$3 datagram 
packet intru$4 detect$3 threat$5 
danger$3 alert$3 event stor$3 

ca\/<f5 conrl<fc"3 francmi't^ 
bdvqO bcilUq>j Lrallbllll^D 

command$3 execut$3 function$3 
analyz$3 determin$3 evaluat$3 
identif$4 first second database db 
secur$3 exist$3 record$3 relat$3 
respon$4 action) and "709"/$.ccls. 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM TDB 


OR 


ON 


2007/09/05 18:07 
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S39 


2 


@ad< M 20040123" and 
("20040250124" "20040133672") 
and (monitor$3 module receiv$3 
incom$3 in-com$3 inbound 
in-bound traffic$3 activity messag$3 
email$3 e-mail$3 mail$3 datagram 
packet intru$4 detect$3 threat$5 
danger$3 alert$3 event stor$3 
sav$3 send$3 transmi$5 
command$3 execut$3 function$3 
analyz$3 determin$3 evaluat$3 
identif$4 first second database db 
secur$3 exist$3 record$3 relat$3 
respon$4 action) and "709"/$.ccls. 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/06 09:29 


S40 


4 


("20020087882" "20020091821" 
"20030023722" "20040107278" 
"20030110253" "20020120737") 
and ((delet$3 or remov$3) near4 
(messag$3 or threat$5 or file or 
mail$3 or email$3 or e-mail$3 or 
virus or packet or datagram)) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/06 13:32 


S41 


17869 


@ad<"20040123" and (((messag$3 
or email$3 or mail$3 or e-mail$3 or 
datagram or packet or file) near4 
(delet$3 or remov$3)) and 
(evaluat$3 or analyz$3 or identif$4) 
and (event or alert$3)) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/06 13:37 


S42 


1823 


@ad<"20040123" and (((messag$3 
or email$3 or mail$3 or e-mail$3 or 
datagram or packet or file) near4 
(delet$3 or remov$3)) and 
(evaluat$3 or analyz$3 or identif$4) 
and (threat$5 or danger$3) and 
(event or alert$3)) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/06 13:42 


S43 


1616 


@ad<"20040123" and (((messag$3 
or email$3 or mail$3 or e-mail$3 or 
datagram or packet or file) near4 
(delet$3 or remov$3)) and 
(evaluat$3 or analyz$3 or identif$4) 
and (threat$5 or danger$3) and 
(event or alert$3) and (monitor$3 
or module) and (receiv$3 or 
incom$3 or in-bound or inbound or 
in-com$3)) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/06 13:47 



9/9/2007 9:28:14 PM 

C:\Documents and Settings\mfearer\My Documents\EAST\Workspaces\10768931.wsp 



Page 10 



EAST Search History 



S44 


1229 


@ad<"20040123" and (((messag$3 
or email$3 or mail$3 or e-mail$3 or 
datagram or packet or file) near4 
(delet$3 or remov$3)) and 
(evaluat$3 or analyz$3 or identif$4) 
and (threat$5 or danger$3) and 
(event or alert$3) and (monitor$3 
or module) and (receiv$3 or 
incom$3 or in-bound or inbound or 
in-com$3) and (db or database)) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBMJTDB 


OR 


ON 


2007/09/06 14:00 


S45 


841 


@ad<"20040123" and (((messag$3 
or email$3 or mail$3 or e-mail$3 or 
datagram or packet or file) near4 
(delet$3 or remov$3)) and 
(evaluat$3 or analyz$3 or identif$4) 
and (threat$5 or danger$3) and 
(event or alert$3) and (monitor$3 
or module) and (receiv$3 or 
incom$3 or in-bound or inbound or 
in-com$3) and (db or database) 
and (rank$3 or priorit$5)) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBMJTDB 


OR 


ON 


2007/09/06 14:04 


S46 


839 


@ad<"20040123" and (((messag$3 
or email$3 or mail$3 or e-mail$3 or 
datagram or packet or file) near4 
(delet$3 or remov$3)) and 
(evaluat$3 or analyz$3 or identif$4) 
and (threat$5 or danger$3) and 
(event or alert$3) and (monitor$3 
or module) and (receiv$3 or 
incom$3 or in-bound or inbound or 
in-com$3) and (db or database) 
and (rank$3 or priorit$5) and 
(buffer$3 or stor$3 or memory)) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBMJTDB 


OR 


ON 


2007/09/06 17:14 


S47 


4 


@ad<"20040123" and 
("20040133672" or "20040250124" 
or "20020087882") and (priorit$3 or 
rank$3) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBMJTDB 


OR 


ON 


2007/09/06 18:00 


S48 


2998 


@ad<"20040123" and ((threat$5 or 
danger$3 or virus or malicious$2) 
and (database or db) and (priorit$5 
or rank$3) and (identif$4 or type or 
descri$5) and (date or tim$5 or 
stamp$3) and source and 
destination) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBMJTDB 


OR 


ON 


2007/09/07 10:08 
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S49 


2 


@ad<"20040123" and 
"20040250124" and (database 
event records message received 
period time) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBMJTDB 


OR 


ON 


2007/09/07 10:36 

• 


S50 


2 


@ad<"20040123" and 
"20040250124" and (identif$4 
(threat$5 or danger$4 or 
malicious$2 or virus) monitor$3 
modules) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBMJTDB 


OR 


ON 


2007/09/07 10:52 


S51 


1 


@ad<"20040123" and 
"20040250124" and (database) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBMJTDB 


OR 


ON 


2007/09/07 11:00 


S52 


1 


@ad<"20040123" and 
"20040250124" and (database 
event record) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBMJTDB 


OR 


ON 


2007/09/07 11:14 


S53 


1 


@ad<"20040123" and 
"20040250124" and (priorit$4 or 
rank$3) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBMJTDB 


OR 


ON 


2007/09/07 11:16 


S54 


2 


@ad<"20040123" and 
"20040250124" and (event type 
description priority date time 
message identifying source data 
destination) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBMJTDB 


OR 


ON 


2007/09/07 14:09 


S55 


1 


@ad<"20040123" and 
"20040250124" and (identif$4) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBMJTDB 


OR 


ON 


2007/09/07 14:12 
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S56 


1 


@ad<"20040123" and 
"20040250124" and (type priority) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBMJTDB 


OR 


ON 


2007/09/07 14:22 


S57 


2 


@ad<"20040123" and 
"20040250124" and (block$3) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBMJTDB 


OR 


ON 


2007/09/07 14:32 


S58 


23 


@ad<"20040123" and (analy$4 
identi$7 event (threat$5 or 
danger$3 or malicious$2) messag$3 
determin$3 Bayesian (transmi$5 or 
send$3) (command or action or 
function) (interface near3 
requirements)) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBMJTDB 


AND 


ON 


2007/09/07 14:49 


S59 


184 


@ad<"20040123" and (analy$4 
identi$7 event (threat$5 or 
danger$3 or malicious$2) messag$3 
determin$3 Bayesian (transmi$5 or 
send$3) (command or action or 
function) interface) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBMJTDB 


AND 


ON 


2007/09/07 16:20 


S60 


1 


@ad<"20040123" and 
"20040250124" and (analy$4 
identi$7 event (threat$5 or 
danger$3 or malicious$2) messag$3 
determin$3 (transmi$5 or send$3) 
(command or action or function)) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBMJTDB 


AND 


ON 


2007/09/07 15:02 


S61 


1 


@ad<"20040123" and 
"20040250124" and (analy$4 
database identi$7 (event or alert$3) 
(threat$5 or danger$3 or 
malicious$2) messag$3 determin$3 
(transmi$5 or send$3) (command 
or action or function)) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBMJTDB 


AND 


ON 


2007/09/07 15:05 


S62 


1 


@ad<"20040123" and "6405250" 
and ((determin$3 or calculat$3) 
(threat$5 or malicious$2 or 
danger$3) interfac$$3) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBMJTDB 


AND 


ON 


2007/09/07 16:42 
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S63 


118 


@ad<"20040123" and ((delet$3 or 
removi 3) with ( db or database) 
with event with (old$2 or ag$3 or 
tim$3 or date)) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM.TDB 


AND 


ON 


2007/09/07 17:13 


S64 


108 


@ad< M 20040123" and ((delet$3 or 
remov$3) with (db or database) 
with event with (old$2 or age or 
time or date)) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


AND 


ON 


2007/09/07 18:16 


S65 


4 


@ad<"20040123" and 

( "20040250124" or "20040133672" 

or "20020087882") and module 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


AND 


ON 


2007/09/07 18:55 


S66 


46133 


@ad<"20040123" and (command$3 
or action or execut$3 or respons$3) 
and (module near4 (deci$4 or 
result$3 or evaluat$3 or 
determin$3)) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


AND 


ON 


2007/09/07 18:41 


S67 


1538 


@ad<"20040123" and 
((command $3 or action or execut$3 
or respo'ns$3) near4 (secur$3 or 
intru$4)) and (module near4 
(deci$4 or result$3 or evaluat$3 or 
determin$3)) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


AND 


ON 


2007/09/07 18:42 


S68 


1 


@ad<"20040123" and 
f "20040250124" or "20040133672" 
or "20020087882") and module 
with block$3 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


AND 


ON 


2007/09/07 18:55 


S69 


3 


@ad<"20040123" and (((first or 1st 
or "1 "\ and Second or 2nd or "2"^ 
near4 (computer or node or 
system)) and ("20040250124" or 
"20040133672") 


US-PGPUB; 
USPAT" 

WJrn I f 

USOCR; 
FPRS; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2007/09/08 18:27 
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S70 


672922 


@ad<"20040123" and (((first or 1st 
or "1"} and (second or 2nd or "2")) 
near4 (computer or node or 
system)) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/08 16:52 


S71 


3044 


@ad<"20040123" and (((first or 1st 
or "1") and (second or 2nd or "2"^ 

Ul JL J CJI IvJ I JvUul IU Ul t— 1 IU ul C- J J 

near4 (computer or node or 
system)) and 709/224.ccls. 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/08 17:14 


S72 


399 


@ad<"20040123" and ((((first or 
1^1* or "1"^ and fspcond or 2nd or 

1DL Ul -L J CJI IU ^JCWI IVJ vl £-\ IU Ul 

"2")) near4 (computer or node or 
system)) with (multiple or 
plurality)) and 709/224.ccls. 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/08 17:34 


S73 


0 


@ad<"20040123" and ((((first or 
1st or "1") and (second or 2nd or 
"2")) near4 (computer or node or 
system)) with (multiple or 
plurality)) and ((Demopoulos.in. or 
Fladebo.in.) or (Barrier near3 
Group).as.) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/08 17:34 


S74 


0 


@ad<"20040123" and 

f f rommanrlt^ or artion or fnnrfion^ 

y ^LUI 1 II 1 lui lU«j>.J Ul CJLLIUI 1 Ul 1 U 1 IV_LIUI \J 

with (event or data) with 
(identif$7)) and ("20040250124" or 
"20040133672") 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/08 18:30 


S75 


35360 


@ad< "20040 123" and 
(frommand$3 or action or function^ 

l l LUI 1 II 1 IUI IU>j) J Ul CJV_LIUI 1 Ul 1 Ul ILLIUI 1 J 

with (event or data) with 
(identif$7)j 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/08 18:31 


S76 


426 


@ad<"20040123" and 

^rnmmanrl^ or arfion or fnnrtion^ 

^LUI 1 II 1 lal IVJ^p •J Ul CH^UUI 1 Ul 1 HI ILvlUI I J 

with (event or data) with 
(identif$7)) and 709/224.ccls. 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM TDB 


OR 


ON 


2007/09/08 18:38 
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S77 


84 


@ad<"20040123" and 
(((command$3 or action or 
function) with (event or data) with 
(identif$7)) same (second or 2nd or 
"2")) and 709/224.ccls. 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/08 19:01 


S78 


20 


@ad<"20040123" and 
(((command$3 or action or 
function) with (event or alert$3 or 
rule or data) with (identif$7)) same 
((second or 2nd or "2") with 
(comput$3 or node or host or 
leaf))) and 709/224.ccls. 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/08 19:20 


S79 


97 


@ad<"20040123" and 
(((command$3 or action or 
function) with (event or alert$3 or 
rule or data) with (identif$7)) with 
(comput$3 or node or host or leaf)) 
and 709/224.ccls. 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/08 19:35 


S80 


38 


@ad<"20040123" and 
ff(command$3 or action or 
function) with (event or alert$3 or 
rule) with (identif$7)) with 
(comput$3 or node or host or leaf)) 
and 709/224.ccls. 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/08 20:34 


S81 


5181 


@ad<"20040123" and (repeat 
identifvina ore-existina event data 
that relate to the new event data 
threshold Bayesian threat level ) 
and 709/224.ccls. 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/08 20:37 


S82 


1 


@ad<"20040123" and (repeat 
identifying pre-existing event data 
threshold Bayesian threat level) and 
709/224.ccls. 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


AND 


ON 


2007/09/08 20:46 


S83 


0 


@ad<"20040123" and (repeat$3 

(event or alert$3) Bayesian 
((threat$5 or danger$3 or 
malicious$2 or intu$4) near3 (level 
or threshold))) and 709/224.ccls. 


US-PGPUB; 

UJrn 1 1 

USOCR; 
FPRS; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


AND 


ON 


2007/09/08 20:48 
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S84 


55 


@ad<"20040123" and (repeat$3 
identif$4 (pre-exist$3 or exist$3) 
(event or alert$3) Bayesian 
((threat$5 or danger$3 or 
malicious$2 or intu$4) near3 (level 
or threshold))) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


AND 


ON 


2007/09/08 20:58 


S85 


60 


@ad<"20040123" and (repeat$3 
identif$4 (pre-exist$3 or exist$3) 
(event or alert$3) Bayesian 
((threat$5 or danger$3 or 
malicious$2 or intru$4) near3 (level 
or threshold))) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


AND 


ON 


2007/09/08 21:07 


S86 


766 


@ad<"20040123" and (repeat$3 
identif$4 ( Dre-exist$3 or exist$3} 

1 VJ V- FILM 1 % Imf 1 V— 1 l_ *Y 1 V**^ ■ J 

(event or alert$3) ((threat$5 or 
danger$3 or malicious$2 or intru$4) 
near3 (level or threshold))) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


AND 


ON 


2007/09/08 21:11 


S87 


59 


@ad<"20040123" and ((repeat$3 
with (event or alert$3)) identif$4 
(pre-exist$3 or exlst$3) ((threat$5 
or danger$3 or malicious$2 or 
intru$4) near3 (level or threshold))) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


AND 


ON 


2007/09/08 21:17 


S88 


161 


@ad<"20040123" and ((repeat$3 
with (event or alert$3)) (pre-exist$3 
or exist$3) ((threat$5 or danger$3 
or malicious$2 or intru$4) with 
(level or threshold))) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


AND 


ON 


2007/09/08 21:32 


S89 


202 


@ad<"20040123" and ((repeat$3 
with ( event or alert$3 or intru$4^ 
(pre-exist$3 or exist$3) ((threat$5 
or danger$3 or malicious$2 or 
intru$4) with (levef or threshold))) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


AND 


ON 


2007/09/08 21:41 


S90 


42 


@ad<"20040123" and (((repeat$3 
or each or everv^ with f event or 
alert$3 or intru$4)) (pre-exist$3 or 
exist$3) ((threat$5 or danger$3 or 
malicious$2 or intru$4) with (level 
or threshold))) and "7097$.ccls. 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM TDB 


AND 


ON 


2007/09/09 15:12 
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